EUVD-2025-4300

Malicious code in bioql PyPI...

EUVD-2025-28872

Malicious code in bioql PyPI...

EUVD-2025-8370

Malicious code in bioql PyPI...

EUVD-2025-4489

Malicious code in bioql PyPI...

CVE-2025-57483

A reflected cross-site scripting XSS vulnerability in tawk.to chatbox widget v4 allows attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted payload into the vulnerable parameter...

PT-2025-39845

Name of the Vulnerable Software and Affected Versions tawk.to chatbox widget version 4 Description A reflected cross-site scripting XSS issue exists in tawk.to chatbox widget version 4. This allows attackers to execute arbitrary Javascript in the context of a user’s browser by injecting a crafted...

CVE-2025-57483

A reflected cross-site scripting XSS vulnerability in tawk.to chatbox widget v4 allows attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted payload into the vulnerable parameter...

CVE-2025-57483

A reflected cross-site scripting (XSS) vulnerability exists in the tawk.to chatbox widget v4 . The flaw stems from unvalidated input allowing attackers to inject a crafted payload into a vulnerable parameter. This enables the execution of arbitrary Javascript within the context of a user's browse...

CVE-2025-57483: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in tawk.to chatbox widget v4 allows attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted payload into the vulnerable parameter...

CVE-2025-9651

A vulnerability was found in shafhasan chatbox up to 156a39cde62f78532c3265a70eda12c70907e56f. This impacts an unknown function of the file /chat.php. The manipulation of the argument userid results in sql injection. The attack may be performed from a remote location. The exploit has been made...

CVE-2025-58211

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Stored XSS.This issue affects Chatbox Manager: from n/a through = 1.2.6...

CVE-2025-9651

A vulnerability was found in shafhasan chatbox up to 156a39cde62f78532c3265a70eda12c70907e56f. This impacts an unknown function of the file /chat.php. The manipulation of the argument userid results in sql injection. The attack may be performed from a remote location. The exploit has been made...

CVE-2025-9651 shafhasan chatbox chat.php sql injection

A vulnerability was found in shafhasan chatbox up to 156a39cde62f78532c3265a70eda12c70907e56f. This impacts an unknown function of the file /chat.php. The manipulation of the argument userid results in sql injection. The attack may be performed from a remote location. The exploit has been made...

CVE-2025-9651

CVE-2025-9651 affects shafhasan chatbox; the vulnerable component is the /chat.php file where manipulating the user_id parameter triggers a SQL injection. The vulnerability is exploitable remotely (attack vector NETWORK) with low privileges required and no user interaction. Documented impact incl...

CVE-2025-9651 shafhasan chatbox chat.php sql injection

A vulnerability was found in shafhasan chatbox up to 156a39cde62f78532c3265a70eda12c70907e56f. This impacts an unknown function of the file /chat.php. The manipulation of the argument userid results in sql injection. The attack may be performed from a remote location. The exploit has been made...

PT-2025-35219

Name of the Vulnerable Software and Affected Versions: shafhasan chatbox versions prior to 156a39cde62f78532c3265a70eda12c70907e56f Description: A vulnerability exists in shafhasan chatbox due to SQL injection. The issue is located in the /chat.php file and affects an unknown function. Manipulati...

Chatbox 安全漏洞

Chatbox is a chat software by the individual developer Shafqat Hasan. Chatbox has a security vulnerability that stems from SQL injection due to incorrect manipulation of the parameter userid in the file /chat.php...

CVE-2025-9651: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in shafhasan chatbox up to 156a39cde62f78532c3265a70eda12c70907e56f. This impacts an unknown function of the file /chat.php. The manipulation of the argument userid results in sql injection. The attack may be performed from a remote location. The exploit has been made...

WordPress Chatbox Manager Plugin <= 1.2.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by theviper17 in WordPress Plugin Chatbox Manager versions = 1.2.6...

CVE-2025-58211

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Stored XSS.This issue affects Chatbox Manager: from n/a through = 1.2.6...